Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/V4nxg6VvqTCeM0_WrvbKrKKVhsc.roa
File: V4nxg6VvqTCeM0_WrvbKrKKVhsc.roa (raw, json)
Hash identifier: Y9+ZQ5Isk48e4y5b7Ov1HPPJzT2NV3kvjcp/Zcl+aXo=
Subject key identifier: 57:89:F1:83:A5:6F:A9:30:9E:33:4F:D6:AE:F6:CA:AC:A2:95:86:C7
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B2481289208180AF13108F6E1E467B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/V4nxg6VvqTCeM0_WrvbKrKKVhsc.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 5.180.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:48:12:89:20:81:80:af:13:10:8f:6e:1e:46:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5789f183a56fa9309e334fd6aef6caaca29586c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0c:a3:74:3b:4e:3f:0d:64:b8:5b:21:18:d2:
bb:3b:d9:b8:a6:67:fd:69:2c:88:8f:29:0c:d6:68:
fa:a0:7f:2a:32:69:ca:b8:83:09:be:64:49:10:e2:
0e:c3:2f:26:c1:d2:f0:25:82:cd:60:7c:b1:af:07:
82:42:e8:2c:5f:b1:e2:95:37:50:5a:ad:eb:38:2a:
00:50:cf:5e:7a:89:37:af:4f:1f:69:33:f0:05:0c:
9c:eb:f1:dd:66:f2:4f:b6:1b:8e:c6:34:9b:e3:ea:
45:1c:9a:96:23:c8:e8:91:a6:43:9e:d6:53:4b:f4:
5e:5a:dd:0a:49:0d:14:92:56:41:31:10:06:5d:7a:
eb:1a:a7:70:b6:79:13:04:b2:66:00:9e:0c:86:04:
49:0b:bb:68:72:78:f3:a4:3e:f6:76:94:3b:bf:ba:
c4:c1:f0:0d:37:90:21:92:ef:88:74:a9:31:3e:4e:
cb:43:6e:41:e9:25:59:06:67:e5:a5:45:26:7b:f7:
4c:d9:71:6f:f2:48:ae:bc:bf:b0:2f:e4:ca:75:65:
16:90:ad:dd:f0:0b:46:02:23:08:f3:fb:0a:8c:72:
42:1d:7a:26:a8:63:2a:1a:00:9f:10:66:41:34:28:
65:ba:58:70:d5:45:2f:ec:a6:83:d3:67:02:38:8c:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:89:F1:83:A5:6F:A9:30:9E:33:4F:D6:AE:F6:CA:AC:A2:95:86:C7
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/V4nxg6VvqTCeM0_WrvbKrKKVhsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.35.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:76:c8:4e:1a:d6:7a:07:9a:7d:19:b6:e5:6d:79:8f:21:85:
6b:a3:b2:2c:a8:52:a3:51:69:76:01:2c:ee:79:46:d9:67:97:
12:28:5d:d2:e9:23:8b:1d:27:41:be:b5:a4:ba:66:c1:cd:4f:
4d:c2:63:1b:d7:46:da:34:d9:f0:97:a1:d8:dd:53:f1:4e:f1:
db:11:d7:ea:80:4c:b2:85:37:63:3c:db:3f:17:14:6b:95:86:
9b:13:e4:5e:de:b0:77:de:94:b4:91:fb:60:a3:8f:a9:35:25:
9f:84:76:89:41:54:92:88:43:c5:69:38:f3:2c:06:af:a2:b4:
9f:23:f0:2a:16:a6:62:f5:84:b1:00:eb:10:ae:f8:11:b3:b8:
9f:b0:32:38:96:49:e3:17:80:6b:a6:de:3b:2b:95:ef:64:b8:
ae:c0:b5:15:f6:c9:14:01:e0:09:b5:43:73:13:64:6f:62:67:
1c:f8:a4:b1:75:bd:20:33:8e:51:c2:2f:61:ad:e8:8c:4f:81:
2c:87:fd:43:8f:ab:3a:32:1d:c7:29:6e:9a:78:32:cd:41:83:
86:de:09:f2:d7:c4:10:7e:84:d6:49:9d:73:29:55:42:8f:75:
08:31:21:4f:09:d2:1d:c5:78:1d:80:1f:d4:30:d7:b4:0b:5a:
c5:c4:c9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:45 2025 by rpki-client